Accepting request 89465 from security:apparmor:factory

- allow loading the libraries for samba "vfs objects" (bnc#725967)

Please include this patch in 12.1

OBS-URL: https://build.opensuse.org/request/show/89465
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=28

apparmor-samba-vfs-objects.diff

@@ -0,0 +1,18 @@
+Allow loading the libraries used for Samba "vfs objects = ..."
+
+References: https://bugzilla.novell.com/show_bug.cgi?id=725967
+
+Signed-off-by: Christian Boltz <apparmor@cboltz.de>
+
+
+=== modified file 'profiles/apparmor.d/usr.sbin.smbd'
+--- profiles/apparmor.d/usr.sbin.smbd	2011-08-27 18:50:42 +0000
++++ profiles/apparmor.d/usr.sbin.smbd	2011-10-26 20:43:13 +0000
+@@ -24,6 +24,7 @@
+   /etc/printcap r,
+   /proc/*/mounts r,
+   /proc/sys/kernel/core_pattern r,
++  /usr/lib64/samba/vfs/*.so mr,
+   /usr/sbin/smbd mr,
+   /etc/samba/* rwk,
+   /var/cache/samba/** rwk,

apparmor.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Oct 26 20:48:16 UTC 2011 - opensuse@cboltz.de
+
+- allow loading the libraries for samba "vfs objects" (bnc#725967)
+
 -------------------------------------------------------------------
 Wed Oct 19 09:53:14 UTC 2011 - opensuse@cboltz.de
 

apparmor.spec

@@ -62,6 +62,9 @@ Patch1:         apparmor-enable-profile-cache.diff
 # include autogenerated profile sniplet for samba shares (bnc#688040)
 Patch2:         apparmor-samba-include-permissions-for-shares.diff
 
+# allow samba "vfs objects" (bnc#725967)
+Patch3:         apparmor-samba-vfs-objects.diff
+
 # split a long string in AppArmor.pm. Not accepted upstream because they want a solution without hardcoded width.
 Patch5:         apparmor-utils-string-split
 
@@ -409,6 +412,7 @@ SubDomain.
 %patch -p0
 %patch1 -p1
 %patch2 -p0
+%patch3 -p0
 %patch5 -p1
 #%patch10 -p1 # disabled, see above
 #%patch11 -p1 # disabled, see above